This Privacy Policy explains how THE HAIR EXPRESS collects, uses, and discloses your Personal Information when you visit the Site or make a purchase from it.

Collecting Personal Information
We will collect some device information, information regarding your interaction with the Site, and further information we require for processing your purchase when you visit the Site. You may even provide us with additional information in case you contact us for customer care. In this Privacy Policy, we refer to such information as "Personal Information," which means any data related to an identifiable individual, including the following. Check out the list below to know what we collect as Personal Information and the reason behind it.

Device information
Purpose of collection: Load Site accurately for you, perform analysis of Site usage to improve our Site.

Source of collection: Automatically collected when access to our Site is gained by cookies, log files, web beacons, tags or pixels

Disclosures for a business purpose: shared with processers Shopify, Meta & Google

Personal Information collected: web browser version, IP address, time zone, cookie information, viewed sites or products, search terms, and how they interact with the Site.

This information is collected in order to provide you with products or services to meet our contract requirements, process your payment with your authorization, arrange shipment, and send you invoices and/or order confirmations as well as ways to communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising related to our products or services.

Source of information: obtained from you.

Disclosure for a Business Purpose: shared with our processor Shopify, Delivery Partners and Payment Portals

Collected Personal Information: Name, billing address, shipping address, payment information (including credit card numbers, NEFT details, Paypal), email address, and phone number.

Minors

The Site is not intended to be used by people under the age of 18 years. Our policy does not include receiving any Personal Information from minors. If you are a parent or guardian and believe your child has given Personal Information to us, please write to the above address requesting deletion.

Sharing Personal Data

We may share personal information with third-party service providers who assist with carrying out the services and the contractual obligations described above. For example:
We use Shopify to power our online store, You can read more about how Shopify uses your Personal Information here-
To comply with applicable laws and regulations, respond to any applicable subpoena, search warrant, or other lawful requests for information we receive, or protect our rights, we may share your Personal Information.

Behavioural Advertising

As stated earlier, our intention is to collect your Personal Information for providing you with customized advertisements or promotional messages which we believe would interest you. For example:
Google Analytics has been implemented to track how our customers use the Site. You can read more about how Google uses personal information here: You may opt out of Google Analytics here:
We share information about how you use our Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases using cookies or other similar technologies (which you may provide consent depending on your location).
Shopify Audiences provides exposure for ads on other sites via our partners to buyers who made purchases/customers of another Shopify merchant but who would be interested in what we have to offer. It also allows us to share information about your activity on the Site, your purchases, and the email address associated with your purchases with Shopify Audiences for other potential offers from some other Shopify merchants.
You probably have heard about the magic of Meta Business, but that said magic brings an overall advertising of your product or service on Facebook, Instagram, and WhatsApp while using your whole personal information and your activity on the platform to show you only the appropriate products and services in a customized manner.
If you want to know how targeted advertising works, you can go to NAI's educational website at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

Using Personal Information
We use your personal Information to provide services to you, including offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you updated on new products, services, and offers.

Lawful basis
Under the General Data Protection Regulation ("GDPR") if you are a resident of the European Economic Area ("EEA"), we process your personal data under the following lawful grounds:

Your consent
The performance of the contract between you and the Site
Compliance with our legal obligations
To protect your vital interests
To perform a task carried out in the public interest
For our legitimate interests, which do not override your fundamental rights and freedoms.
Retention

When you place an order through the Site, we are keeping your Personal Information on file unless or until you ask us to erase this information. In regard to your right of erasure, please refer to the chapter ‘Your rights’ below.

Automatic decision-making
If you are an EEA resident, you have the right to object to such processing based solely on automated decision-making (including profiling), where this decision-making has a legal effect on you or otherwise significantly affects you.
We DO NOT engage in all automated decision-making giving a legal or otherwise significant effect in relation to customer data.
Our processor Shopify uses limited aspects of automated decision making to prevent fraud, which doesn't have legal or otherwise significant effect on you.
Services include elements of automated decision making, for example, the following:
Temporary blacklisting of IP addresses with repeated failed transactions. This list lasts for a few hours. Temporary blacklisting of credit cards connected to blacklisted IP addresses. This list lasts for a small number of days. Your rights [INCLUDE FOLLOWING SECTION IF YOUR STORE IS LOCATED IN OR IF YOU HAVE CUSTOMERS IN EUROPE] GDPR If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, port it to a new service and ask that your Personal Information be corrected, updated, or erased. If you want to exercise these rights, please contact us through the contact information above. There, about your Personal Information, it will now first be processed in Ireland and transferred further beyond Europe for any further processing including its storage then, such countries include Canada and USA; more information about how data transfers comply with the GDPR can be viewed by visiting the link given earlier with respect to the GDPR White paper of Shopify: thehairexpress.com Cookies When you visit our Site, a small piece of information is downloaded to your computer or device called a cookie. We have several types of cookies that we use, such as functional cookies, performance cookies, advertising cookies, and social media or content cookies. Cookies personalize the browsing experience such that when you log in, for example, or choose a region, those actions and preferences remain in place when you visit the site in the future or navigate from one page to another. They also tell us whether this is the first visit for someone or if they have been here before. We deploy the following cookies in order for us to optimise your experience on our Site and, thereby, provide our services. Cookies Necessary for the Functioning of the Store Whether a cookie is a "session cookie" or a "persistent cookie" determines the duration of the cookie on your computer or mobile device. Session cookies are only on your PC while you are browsing. All other cookies will last till they get expired or deleted. Most of these cookies will last persistence from anywhere between thirty minutes to two years from the date they have been downloaded to your device. You can control and manage cookies in several ways. Please note that removing or rejecting cookies may affect the functionality of the user experience and therefore, some portions of our website may cease to be fully available. Most browsers will by default accept cookies. However, you can set your browser controls to accept or not accept cookies. This option is usually included in the "Tools" or "Preferences" menu of a given browser. More information on blocking, managing, or filtering cookies can be found in your browser's help file or at sites like www.allaboutcookies.org.
Moreover, take note of the fact that blocking cookies does not imply that we will stop sharing information to third parties including our advertising partners. Exercise your rights or opt-out of certain uses of your information by such parties using the information provided in the section about “Behavioural Advertising” above.

Do Not Track
Please note that because there is no industry standard on how a signal of Do Not Track must be handled, we do not change our data collection and usage practices upon detection of such signal from your browser.

Changes
This Privacy Policy may be modified from time to time to, among other things, mirror the updating of our practice, or for other operational, legal, or regulatory purpose.

Complaint
Please refer to the above section if your complaint should be sent to us either electronically or through postal mail contact information at the above "Contact" section.
In case you are not happy with the response given by us against your complaint, you have the right to file a complaint with the appropriate data protection authority.